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CLOUDFLARE 


Cloudflare Magic Transit + Kentik Protect 


Enable network traffic intelligence and advanced network DDoS protection with Kentik Protect 
and Cloudflare Magic Transit 


Challenge 


Distributed Denial of Service (DDoS) attacks break new records every month and have been highly disruptive for businesses 
everywhere. The proliferation of toolkits make it simple and cheap for anyone to launch DDoS attacks. Network security teams 
need real-time visibility into network traffic patterns and automated solutions to mitigate attacks and ensure network and 
application availability. 


Solution 


Network security teams need both effective DDoS protection and real-time network observability. Combining best-in-class 
flow-based monitoring from Kentik with industry-leading DDoS protection from Cloudflare helps operations teams better 
manage and protect their networks. 


Cloudflare Magic Transit and Kentik Protect communicate via a REST API to detect DDoS attacks and trigger on-demand 
mitigation using the Cloudflare global network. With data centers in 250+ cities and over 120 Tops of edge capacity, Magic 
Transit can absorb and neutralize even the largest volumetric DDoS attacks, protecting your network from collateral damage 
and ensuring application availability for your customers and users. 


With a pure cloud-native solution, there is no hardware to install and manage. The solution can be deployed quickly and 
mitigation actions can be fully automated, saving you time and resources. 


Customers can purchase this combined solution directly from Cloudflare, and also have the option to run Magic Transit DDoS 
mitigation in Always On mode. 


Benefits 


The Cloudflare and Kentik combined network observability and DDoS protection solution enables organizations to mitigate 
highly sophisticated DDoS attacks in real-time. IT teams and network security engineers can benefit in several ways, from 
increased agility and peace of mind to deployment speed and lower costs. 
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Increase operational agility with Make use of a single joint Reduce your total cost of 

a completely cloud-native solution solution for network traffic ownership (TCO) and leverage 

and eliminate false positives and intelligence, attack detection, DDoS protection with built-in 
negatives. mitigation, and investigation. performance benefits. 
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Integration Overview 


Network security teams benefit from a pre-built integration between Kentik Protect and Cloudflare Magic Transit using the 
Cloudflare API. Kentik monitors network activity for signs of a potential DDoS event using fine tuned rules and signals Magic 
Transit to activate on-demand mitigation. Once activated, customer traffic flows through the Cloudflare network and is filtered 
at the edge data center closest to the source. Clean traffic is delivered to the customer network, ensuring legitimate users can 
access the services they need. Kentik uses flow telemetry in a broad range of formats to help network security teams 
understand their traffic patterns and analyze threats in real time across a mixed infrastructure. 
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Mitigation Flow 


Kentik’s network collects flow logs from your network components, continuously learning new behavior and detecting 
anomalies like DDoS attacks when they commence. Through policy-based alerting, Kentik recognizes DDoS attacks, notifying 
customers of these threats and other anomalies. With our native API integration, the Kentik platform can trigger Magic Transit 
to begin attracting network traffic when an attack is underway, while Magic Transit automatically analyzes incoming traffic and 
filters out DDoS traffic across Cloudflare’s entire network. The result for customers is clear: the best DDoS protection and 
network observability in a unified and completely SaaS-based offering. 


About Cloudflare 


Cloudflare, Inc. is on a mission to help build a better Internet. Cloudflare’s platform protects and accelerates any Internet 
application online without adding hardware, installing software, or changing a line of code. Internet properties powered by 
Cloudflare have all web traffic routed through its intelligent global network, which gets smarter with every request. As a result, 
they see significant improvement in performance and a decrease in spam and other attacks. 


About Kentik 


Kentik is the network observability company. Our platform is a must-have for the network front line, whether digital business, 
corporate IT or service provider. Network and cloud professionals turn to the Kentik Network Observability Cloud to plan, run 
and fix any network, relying on our infinite granularity, Al-driven insights and ridiculously fast search. Learn more at kentik.com. 
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